Zap Report of testphp.vulnweb.com

Generated on Thu, 3 Apr 2025 10:14:55

ZAP Version: 2.16.0

ZAP by Checkmarx

Summary of Alerts

Risk Level Number of Alerts
High
0
Medium
3
Low
3
False Positives:
0

Alerts

Name Risk Level Number of Instances
Absence of Anti-CSRF Tokens Medium 40
Content Security Policy (CSP) Header Not Set Medium 48
Missing Anti-clickjacking Header Medium 44
Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) Low 62
Server Leaks Version Information via "Server" HTTP Response Header Field Low 74
X-Content-Type-Options Header Missing Low 68

Passing Rules

Name Rule Type Threshold Strength
Directory Browsing Active MEDIUM MEDIUM
CRLF Injection Active MEDIUM MEDIUM
Path Traversal Active MEDIUM MEDIUM
Remote File Inclusion Active MEDIUM MEDIUM
Parameter Tampering Active MEDIUM MEDIUM
Server Side Include Active MEDIUM MEDIUM
GET for POST Active MEDIUM MEDIUM
Cross Site Scripting (Reflected) Active MEDIUM MEDIUM
Cross Site Scripting (Persistent) Active MEDIUM MEDIUM
Script Active Scan Rules Active MEDIUM MEDIUM
Cross Site Scripting (Persistent) - Prime Active MEDIUM MEDIUM
Cross Site Scripting (Persistent) - Spider Active MEDIUM MEDIUM
SQL Injection Active MEDIUM MEDIUM
SQL Injection - MySQL Active MEDIUM MEDIUM
SQL Injection - Hypersonic SQL Active MEDIUM MEDIUM
SQL Injection - Oracle Active MEDIUM MEDIUM
SQL Injection - PostgreSQL Active MEDIUM MEDIUM
SQL Injection - SQLite Active MEDIUM MEDIUM
Cross Site Scripting (DOM Based) Active MEDIUM MEDIUM
SQL Injection - MsSQL Active MEDIUM MEDIUM
ELMAH Information Leak Active MEDIUM MEDIUM
Trace.axd Information Leak Active MEDIUM MEDIUM
XSLT Injection Active MEDIUM MEDIUM
.htaccess Information Leak Active MEDIUM MEDIUM
.env Information Leak Active MEDIUM MEDIUM
Server Side Code Injection Active MEDIUM MEDIUM
Advanced SQL Injection Active MEDIUM MEDIUM
Hidden File Finder Active MEDIUM MEDIUM
XPath Injection Active MEDIUM MEDIUM
Remote OS Command Injection Active MEDIUM MEDIUM
XML External Entity Attack Active MEDIUM MEDIUM
Generic Padding Oracle Active MEDIUM MEDIUM
Spring Actuator Information Leak Active MEDIUM MEDIUM
SOAP Action Spoofing Active MEDIUM MEDIUM
Log4Shell Active MEDIUM MEDIUM
SOAP XML Injection Active MEDIUM MEDIUM
Spring4Shell Active MEDIUM MEDIUM
Heartbleed OpenSSL Vulnerability Active MEDIUM MEDIUM
Buffer Overflow Active MEDIUM MEDIUM
Source Code Disclosure - CVE-2012-1823 Active MEDIUM MEDIUM
Format String Error Active MEDIUM MEDIUM
Server Side Template Injection Active MEDIUM MEDIUM
Remote Code Execution - CVE-2012-1823 Active MEDIUM MEDIUM
Cloud Metadata Potentially Exposed Active MEDIUM MEDIUM
External Redirect Active MEDIUM MEDIUM
Server Side Template Injection (Blind) Active MEDIUM MEDIUM
User Agent Fuzzer Active MEDIUM MEDIUM
Source Code Disclosure - /WEB-INF Folder Active MEDIUM MEDIUM
Session Management Response Identified Passive MEDIUM -
Verification Request Identified Passive MEDIUM -
Private IP Disclosure Passive MEDIUM -
Session ID in URL Rewrite Passive MEDIUM -
Script Served From Malicious Domain (polyfill) Passive MEDIUM -
Insecure JSF ViewState Passive MEDIUM -
Vulnerable JS Library (Powered by Retire.js) Passive MEDIUM -
Charset Mismatch Passive MEDIUM -
Cookie No HttpOnly Flag Passive MEDIUM -
Cookie Without Secure Flag Passive MEDIUM -
Re-examine Cache-control Directives Passive MEDIUM -
Cross-Domain JavaScript Source File Inclusion Passive MEDIUM -
Content-Type Header Missing Passive MEDIUM -
Application Error Disclosure Passive MEDIUM -
Information Disclosure - Debug Error Messages Passive MEDIUM -
Information Disclosure - Sensitive Information in URL Passive MEDIUM -
Information Disclosure - Sensitive Information in HTTP Referrer Header Passive MEDIUM -
Information Disclosure - Suspicious Comments Passive MEDIUM -
Open Redirect Passive MEDIUM -
Cookie Poisoning Passive MEDIUM -
HUNT Methodology Passive MEDIUM -
User Controllable Charset Passive MEDIUM -
Reflected HTTP GET Parameter(s) Passive MEDIUM -
WSDL File Detection Passive MEDIUM -
User Controllable HTML Element Attribute (Potential XSS) Passive MEDIUM -
Loosely Scoped Cookie Passive MEDIUM -
Viewstate Passive MEDIUM -
Directory Browsing Passive MEDIUM -
Heartbleed OpenSSL Vulnerability (Indicative) Passive MEDIUM -
Strict-Transport-Security Header Passive MEDIUM -
X-Backend-Server Header Information Leak Passive MEDIUM -
Secure Pages Include Mixed Content Passive MEDIUM -
HTTP to HTTPS Insecure Transition in Form Post Passive MEDIUM -
HTTPS to HTTP Insecure Transition in Form Post Passive MEDIUM -
User Controllable JavaScript Event (XSS) Passive MEDIUM -
Big Redirect Detected (Potential Sensitive Information Leak) Passive MEDIUM -
Retrieved from Cache Passive MEDIUM -
X-ChromeLogger-Data (XCOLD) Header Information Leak Passive MEDIUM -
Cookie without SameSite Attribute Passive MEDIUM -
CSP Passive MEDIUM -
X-Debug-Token Information Leak Passive MEDIUM -
Username Hash Found Passive MEDIUM -
X-AspNet-Version Response Header Passive MEDIUM -
PII Disclosure Passive MEDIUM -
Script Passive Scan Rules Passive MEDIUM -
Stats Passive Scan Rule Passive MEDIUM -
Timestamp Disclosure Passive MEDIUM -
Hash Disclosure Passive MEDIUM -
Cross-Domain Misconfiguration Passive MEDIUM -
Weak Authentication Method Passive MEDIUM -
Reverse Tabnabbing Passive MEDIUM -
Modern Web Application Passive MEDIUM -
Authentication Request Identified Passive MEDIUM -

Sites

http://testphp.vulnweb.com

HTTP Response Code Number of Responses
502 Bad Gateway
9
404 Not Found
65
200 OK
98
400 Bad Request
2
302 Found
2

No Authentication Statistics Found

Technology Version Categories Implies
Adobe Flash
Programming languages
Cart Functionality
Ecommerce
DreamWeaver
Editors
Nginx
1.19.0
Web servers
Reverse proxies
PHP
5.6.40
Programming languages
Ubuntu
Operating systems

Alert Detail

Medium
 Absence of Anti-CSRF Tokens
Description
No Anti-CSRF tokens were found in a HTML submission form.

A cross-site request forgery is an attack that involves forcing a victim to send an HTTP request to a target destination without their knowledge or intent in order to perform an action as the victim. The underlying cause is application functionality using predictable URL/form actions in a repeatable way. The nature of the attack is that CSRF exploits the trust that a web site has for a user. By contrast, cross-site scripting (XSS) exploits the trust that a user has for a web site. Like XSS, CSRF attacks are not necessarily cross-site, but they can be. Cross-site request forgery is also known as CSRF, XSRF, one-click attack, session riding, confused deputy, and sea surf.

CSRF attacks are effective in a number of situations, including:

* The victim has an active session on the target site.

* The victim is authenticated via HTTP auth on the target site.

* The victim is on the same local network as the target site.

CSRF has primarily been used to perform an action against a target site using the victim's privileges, but recent techniques have been discovered to disclose information by gaining access to the response. The risk of information disclosure is dramatically increased when the target site is vulnerable to XSS, because XSS can be used as a platform for CSRF, allowing the attack to operate within the bounds of the same-origin policy.
URL http://testphp.vulnweb.com
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 238 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/artists.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,328 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=1
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,251 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=2
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=3
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/cart.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 284 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/categories.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,115 bytes.
URL http://testphp.vulnweb.com/disclaimer.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,524 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter
Attack
Evidence <form action="" method="post" name="faddentry">
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/index.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=1
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,994 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=2
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,193 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=3
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=1
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,880 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=2
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,311 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=3
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=4
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter
Attack
Evidence <form name="loginform" method="post" action="userinfo.php">
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter
Attack
Evidence <form name='f_addcart' method='POST' action='cart.php'>
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter
Attack
Evidence <form name="form1" method="post" action="/secured/newuser.php">
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/cart.php
Method POST
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 372 bytes.
Request Body - size: 19 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter
Attack
Evidence <form action="" method="post" name="faddentry">
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/search.php?test=query
Method POST
Parameter
Attack
Evidence <form action="search.php?test=query" method="post">
Request Header - size: 367 bytes.
Request Body - size: 25 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,772 bytes.
Instances 40
Solution
Phase: Architecture and Design

Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.

For example, use anti-CSRF packages such as the OWASP CSRFGuard.

Phase: Implementation

Ensure that your application is free of cross-site scripting issues, because most CSRF defenses can be bypassed using attacker-controlled script.

Phase: Architecture and Design

Generate a unique nonce for each form, place the nonce into the form, and verify the nonce upon receipt of the form. Be sure that the nonce is not predictable (CWE-330).

Note that this can be bypassed using XSS.

Identify especially dangerous operations. When the user performs a dangerous operation, send a separate confirmation request to ensure that the user intended to perform that operation.

Note that this can be bypassed using XSS.

Use the ESAPI Session Management control.

This control includes a component for CSRF.

Do not use the GET method for any request that triggers a state change.

Phase: Implementation

Check the HTTP Referer header to see if the request originated from an expected page. This could break legitimate functionality, because users or proxies may have disabled sending the Referer for privacy reasons.
Reference https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
https://cwe.mitre.org/data/definitions/352.html
Tags OWASP_2021_A01
WSTG-v42-SESS-05
OWASP_2017_A05
CWE-352
CWE Id 352
WASC Id 9
Plugin Id 10202
Medium
 Content Security Policy (CSP) Header Not Set
Description
Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.
URL http://testphp.vulnweb.com
Method GET
Parameter
Attack
Evidence
Request Header - size: 238 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/AJAX/index.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,236 bytes.
URL http://testphp.vulnweb.com/artists.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,328 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=1
Method GET
Parameter
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,251 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=2
Method GET
Parameter
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=3
Method GET
Parameter
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/cart.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 284 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/categories.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,115 bytes.
URL http://testphp.vulnweb.com/disclaimer.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,524 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/high
Method GET
Parameter
Attack
Evidence
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 259 bytes.
Response Body - size: 555 bytes.
URL http://testphp.vulnweb.com/hpp/
Method GET
Parameter
Attack
Evidence
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 203 bytes.
URL http://testphp.vulnweb.com/hpp/?pp=12
Method GET
Parameter
Attack
Evidence
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 383 bytes.
URL http://testphp.vulnweb.com/hpp/params.php?p=valid&pp=12
Method GET
Parameter
Attack
Evidence
Request Header - size: 315 bytes.
Request Body - size: 0 bytes.
Response Header - size: 404 bytes.
Response Body - size: 7 bytes.
URL http://testphp.vulnweb.com/index.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=1
Method GET
Parameter
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,994 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=2
Method GET
Parameter
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,193 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=3
Method GET
Parameter
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=1
Method GET
Parameter
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,880 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=2
Method GET
Parameter
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,311 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=3
Method GET
Parameter
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=4
Method GET
Parameter
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/
Method GET
Parameter
Attack
Evidence
Request Header - size: 293 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 975 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-1/
Method GET
Parameter
Attack
Evidence
Request Header - size: 365 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-2/
Method GET
Parameter
Attack
Evidence
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-3/
Method GET
Parameter
Attack
Evidence
Request Header - size: 348 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/color-printer/3/
Method GET
Parameter
Attack
Evidence
Request Header - size: 335 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 313 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/network-attached-storage-dlink/1/
Method GET
Parameter
Attack
Evidence
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 319 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/web-camera-a4tech/2/
Method GET
Parameter
Attack
Evidence
Request Header - size: 339 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 279 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-1.html
Method GET
Parameter
Attack
Evidence
Request Header - size: 370 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-2.html
Method GET
Parameter
Attack
Evidence
Request Header - size: 357 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-3.html
Method GET
Parameter
Attack
Evidence
Request Header - size: 353 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/privacy.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 412 bytes.
Response Body - size: 16 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/robots.txt
Method GET
Parameter
Attack
Evidence
Request Header - size: 249 bytes.
Request Body - size: 0 bytes.
Response Header - size: 259 bytes.
Response Body - size: 555 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter
Attack
Evidence
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/sitemap.xml
Method GET
Parameter
Attack
Evidence
Request Header - size: 250 bytes.
Request Body - size: 0 bytes.
Response Header - size: 259 bytes.
Response Body - size: 555 bytes.
URL http://testphp.vulnweb.com/cart.php
Method POST
Parameter
Attack
Evidence
Request Header - size: 372 bytes.
Request Body - size: 19 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter
Attack
Evidence
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/search.php?test=query
Method POST
Parameter
Attack
Evidence
Request Header - size: 367 bytes.
Request Body - size: 25 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,772 bytes.
URL http://testphp.vulnweb.com/secured/newuser.php
Method POST
Parameter
Attack
Evidence
Request Header - size: 376 bytes.
Request Body - size: 96 bytes.
Response Header - size: 406 bytes.
Response Body - size: 733 bytes.
Instances 48
Solution
Ensure that your web server, application server, load balancer, etc. is configured to set the Content-Security-Policy header.
Reference https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Introducing_Content_Security_Policy
https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html
https://www.w3.org/TR/CSP/
https://w3c.github.io/webappsec-csp/
https://web.dev/articles/csp
https://caniuse.com/#feat=contentsecuritypolicy
https://content-security-policy.com/
Tags CWE-693
OWASP_2021_A05
OWASP_2017_A06
CWE Id 693
WASC Id 15
Plugin Id 10038
Medium
 Missing Anti-clickjacking Header
Description
The response does not protect against 'ClickJacking' attacks. It should include either Content-Security-Policy with 'frame-ancestors' directive or X-Frame-Options.
URL http://testphp.vulnweb.com
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 238 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/AJAX/index.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,236 bytes.
URL http://testphp.vulnweb.com/artists.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,328 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=1
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,251 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=2
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=3
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/cart.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 284 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/categories.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,115 bytes.
URL http://testphp.vulnweb.com/disclaimer.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,524 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/hpp/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 203 bytes.
URL http://testphp.vulnweb.com/hpp/?pp=12
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 383 bytes.
URL http://testphp.vulnweb.com/hpp/params.php?p=valid&pp=12
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 315 bytes.
Request Body - size: 0 bytes.
Response Header - size: 404 bytes.
Response Body - size: 7 bytes.
URL http://testphp.vulnweb.com/index.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=1
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,994 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=2
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,193 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=3
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=1
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,880 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=2
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,311 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=3
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=4
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 293 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 975 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-1/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 365 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-2/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-3/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 348 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/color-printer/3/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 335 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 313 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/network-attached-storage-dlink/1/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 319 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/web-camera-a4tech/2/
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 339 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 279 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-1.html
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 370 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-2.html
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 357 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-3.html
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 353 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter x-frame-options
Attack
Evidence
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/cart.php
Method POST
Parameter x-frame-options
Attack
Evidence
Request Header - size: 372 bytes.
Request Body - size: 19 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter x-frame-options
Attack
Evidence
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/search.php?test=query
Method POST
Parameter x-frame-options
Attack
Evidence
Request Header - size: 367 bytes.
Request Body - size: 25 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,772 bytes.
URL http://testphp.vulnweb.com/secured/newuser.php
Method POST
Parameter x-frame-options
Attack
Evidence
Request Header - size: 376 bytes.
Request Body - size: 96 bytes.
Response Header - size: 406 bytes.
Response Body - size: 733 bytes.
Instances 44
Solution
Modern Web browsers support the Content-Security-Policy and X-Frame-Options HTTP headers. Ensure one of them is set on all web pages returned by your site/app.

If you expect the page to be framed only by pages on your server (e.g. it's part of a FRAMESET) then you'll want to use SAMEORIGIN, otherwise if you never expect the page to be framed, you should use DENY. Alternatively consider implementing Content Security Policy's "frame-ancestors" directive.
Reference https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
Tags WSTG-v42-CLNT-09
OWASP_2021_A05
OWASP_2017_A06
CWE-1021
CWE Id 1021
WASC Id 15
Plugin Id 10020
Low
 Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)
Description
The web/application server is leaking information via one or more "X-Powered-By" HTTP response headers. Access to such information may facilitate attackers identifying other frameworks/components your web application is reliant upon and the vulnerabilities such components may be subject to.
URL http://testphp.vulnweb.com
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 238 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/AJAX/index.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,236 bytes.
URL http://testphp.vulnweb.com/artists.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,328 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=1
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,251 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=2
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=3
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/cart.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 284 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/categories.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,115 bytes.
URL http://testphp.vulnweb.com/disclaimer.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,524 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/hpp/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 203 bytes.
URL http://testphp.vulnweb.com/hpp/?pp=12
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 383 bytes.
URL http://testphp.vulnweb.com/hpp/params.php?p=valid&pp=12
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 315 bytes.
Request Body - size: 0 bytes.
Response Header - size: 404 bytes.
Response Body - size: 7 bytes.
URL http://testphp.vulnweb.com/index.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=1
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,994 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=2
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,193 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=3
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=1
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,880 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=2
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,311 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=3
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=4
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 293 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 975 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-1/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 365 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-2/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-3/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 348 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/color-printer/3/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 335 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 313 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/network-attached-storage-dlink/1/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 319 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/web-camera-a4tech/2/
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 339 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 279 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-1.html
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 370 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-2.html
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 357 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-3.html
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 353 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/privacy.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 412 bytes.
Response Body - size: 16 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/showimage.php?file='%20+%20pict.item(0).firstChild.nodeValue%20+%20'
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 359 bytes.
Request Body - size: 0 bytes.
Response Header - size: 392 bytes.
Response Body - size: 261 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/1.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 12,426 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/1.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 12,426 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/2.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 3,324 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/2.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 3,324 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/3.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 9,692 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/3.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 9,692 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/4.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 13,969 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/4.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 13,969 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/5.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 14,228 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/5.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 14,228 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/6.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 11,465 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/6.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 11,465 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/7.jpg
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 19,219 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/7.jpg&size=160
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 19,219 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/userinfo.php
Method GET
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 288 bytes.
Request Body - size: 0 bytes.
Response Header - size: 429 bytes.
Response Body - size: 14 bytes.
URL http://testphp.vulnweb.com/cart.php
Method POST
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 372 bytes.
Request Body - size: 19 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/search.php?test=query
Method POST
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 367 bytes.
Request Body - size: 25 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,772 bytes.
URL http://testphp.vulnweb.com/secured/newuser.php
Method POST
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 376 bytes.
Request Body - size: 96 bytes.
Response Header - size: 406 bytes.
Response Body - size: 733 bytes.
URL http://testphp.vulnweb.com/userinfo.php
Method POST
Parameter
Attack
Evidence X-Powered-By: PHP/5.6.40-38+ubuntu20.04.1+deb.sury.org+1
Request Header - size: 368 bytes.
Request Body - size: 18 bytes.
Response Header - size: 429 bytes.
Response Body - size: 14 bytes.
Instances 62
Solution
Ensure that your web server, application server, load balancer, etc. is configured to suppress "X-Powered-By" headers.
Reference https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/01-Information_Gathering/08-Fingerprint_Web_Application_Framework
https://www.troyhunt.com/2012/02/shhh-dont-let-your-response-headers.html
Tags OWASP_2021_A01
OWASP_2017_A03
WSTG-v42-INFO-08
CWE-497
CWE Id 497
WASC Id 13
Plugin Id 10037
Low
 Server Leaks Version Information via "Server" HTTP Response Header Field
Description
The web/application server is leaking version information via the "Server" HTTP response header. Access to such information may facilitate attackers identifying other vulnerabilities your web/application server is subject to.
URL http://testphp.vulnweb.com
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 238 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/AJAX/index.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,236 bytes.
URL http://testphp.vulnweb.com/AJAX/styles.css
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 306 bytes.
Request Body - size: 0 bytes.
Response Header - size: 341 bytes.
Response Body - size: 562 bytes.
URL http://testphp.vulnweb.com/artists.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,328 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=1
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,251 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=2
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=3
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/cart.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 284 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/categories.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,115 bytes.
URL http://testphp.vulnweb.com/disclaimer.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,524 bytes.
URL http://testphp.vulnweb.com/Flash/add.swf
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 365 bytes.
Response Body - size: 17,418 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/high
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 259 bytes.
Response Body - size: 555 bytes.
URL http://testphp.vulnweb.com/hpp/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 203 bytes.
URL http://testphp.vulnweb.com/hpp/?pp=12
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 383 bytes.
URL http://testphp.vulnweb.com/hpp/params.php?p=valid&pp=12
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 315 bytes.
Request Body - size: 0 bytes.
Response Header - size: 404 bytes.
Response Body - size: 7 bytes.
URL http://testphp.vulnweb.com/images/logo.gif
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 6,660 bytes.
URL http://testphp.vulnweb.com/images/remark.gif
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 307 bytes.
Request Body - size: 0 bytes.
Response Header - size: 340 bytes.
Response Body - size: 79 bytes.
URL http://testphp.vulnweb.com/index.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=1
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,994 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=2
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,193 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=3
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=1
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,880 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=2
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,311 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=3
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=4
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 293 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 975 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-1/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 365 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-2/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-3/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 348 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/color-printer/3/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 335 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 313 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/network-attached-storage-dlink/1/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 319 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/web-camera-a4tech/2/
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 339 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 279 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/images/1.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 323 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 3,551 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/images/2.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 323 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 2,739 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/images/3.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 323 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 3,560 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-1.html
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 370 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-2.html
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 357 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-3.html
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 353 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/privacy.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 412 bytes.
Response Body - size: 16 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/robots.txt
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 249 bytes.
Request Body - size: 0 bytes.
Response Header - size: 259 bytes.
Response Body - size: 555 bytes.
URL http://testphp.vulnweb.com/secured/style.css
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 343 bytes.
Response Body - size: 5,482 bytes.
URL http://testphp.vulnweb.com/showimage.php?file='%20+%20pict.item(0).firstChild.nodeValue%20+%20'
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 359 bytes.
Request Body - size: 0 bytes.
Response Header - size: 392 bytes.
Response Body - size: 261 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/1.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 12,426 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/1.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 12,426 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/2.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 3,324 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/2.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 3,324 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/3.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 9,692 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/3.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 9,692 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/4.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 13,969 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/4.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 13,969 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/5.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 14,228 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/5.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 14,228 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/6.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 11,465 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/6.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 11,465 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/7.jpg
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 19,219 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/7.jpg&size=160
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 19,219 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/sitemap.xml
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 250 bytes.
Request Body - size: 0 bytes.
Response Header - size: 259 bytes.
Response Body - size: 555 bytes.
URL http://testphp.vulnweb.com/style.css
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 343 bytes.
Response Body - size: 5,482 bytes.
URL http://testphp.vulnweb.com/userinfo.php
Method GET
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 288 bytes.
Request Body - size: 0 bytes.
Response Header - size: 429 bytes.
Response Body - size: 14 bytes.
URL http://testphp.vulnweb.com/cart.php
Method POST
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 372 bytes.
Request Body - size: 19 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/search.php?test=query
Method POST
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 367 bytes.
Request Body - size: 25 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,772 bytes.
URL http://testphp.vulnweb.com/secured/newuser.php
Method POST
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 376 bytes.
Request Body - size: 96 bytes.
Response Header - size: 406 bytes.
Response Body - size: 733 bytes.
URL http://testphp.vulnweb.com/userinfo.php
Method POST
Parameter
Attack
Evidence nginx/1.19.0
Request Header - size: 368 bytes.
Request Body - size: 18 bytes.
Response Header - size: 429 bytes.
Response Body - size: 14 bytes.
Instances 74
Solution
Ensure that your web server, application server, load balancer, etc. is configured to suppress the "Server" header or provide generic details.
Reference https://httpd.apache.org/docs/current/mod/core.html#servertokens
https://learn.microsoft.com/en-us/previous-versions/msp-n-p/ff648552(v=pandp.10)
https://www.troyhunt.com/shhh-dont-let-your-response-headers/
Tags OWASP_2021_A05
OWASP_2017_A06
WSTG-v42-INFO-02
CWE-497
CWE Id 497
WASC Id 13
Plugin Id 10036
Low
 X-Content-Type-Options Header Missing
Description
The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared content type. Current (early 2014) and legacy versions of Firefox will use the declared content type (if one is set), rather than performing MIME-sniffing.
URL http://testphp.vulnweb.com
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 238 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/AJAX/index.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,236 bytes.
URL http://testphp.vulnweb.com/AJAX/styles.css
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 306 bytes.
Request Body - size: 0 bytes.
Response Header - size: 341 bytes.
Response Body - size: 562 bytes.
URL http://testphp.vulnweb.com/artists.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 287 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,328 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=1
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,251 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=2
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/artists.php?artist=3
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 308 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,193 bytes.
URL http://testphp.vulnweb.com/cart.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 284 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/categories.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,115 bytes.
URL http://testphp.vulnweb.com/disclaimer.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 290 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,524 bytes.
URL http://testphp.vulnweb.com/Flash/add.swf
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 365 bytes.
Response Body - size: 17,418 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 289 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,390 bytes.
URL http://testphp.vulnweb.com/hpp/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 280 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 203 bytes.
URL http://testphp.vulnweb.com/hpp/?pp=12
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 383 bytes.
URL http://testphp.vulnweb.com/hpp/params.php?p=valid&pp=12
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 315 bytes.
Request Body - size: 0 bytes.
Response Header - size: 404 bytes.
Response Body - size: 7 bytes.
URL http://testphp.vulnweb.com/images/logo.gif
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 291 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 6,660 bytes.
URL http://testphp.vulnweb.com/images/remark.gif
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 307 bytes.
Request Body - size: 0 bytes.
Response Header - size: 340 bytes.
Response Body - size: 79 bytes.
URL http://testphp.vulnweb.com/index.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,958 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=1
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,994 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=2
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,193 bytes.
URL http://testphp.vulnweb.com/listproducts.php?artist=3
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 322 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=1
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 7,880 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=2
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,311 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=3
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/listproducts.php?cat=4
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,699 bytes.
URL http://testphp.vulnweb.com/login.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,523 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 293 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 975 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-1/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 365 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-2/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/BuyProduct-3/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 348 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/color-printer/3/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 335 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 313 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/network-attached-storage-dlink/1/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 352 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 319 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/Details/web-camera-a4tech/2/
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 339 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 279 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/images/1.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 323 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 3,551 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/images/2.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 323 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 2,739 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/images/3.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 323 bytes.
Request Body - size: 0 bytes.
Response Header - size: 344 bytes.
Response Body - size: 3,560 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-1.html
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 370 bytes.
Request Body - size: 0 bytes.
Response Header - size: 406 bytes.
Response Body - size: 100 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-2.html
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 357 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 76 bytes.
URL http://testphp.vulnweb.com/Mod_Rewrite_Shop/RateProduct-3.html
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 353 bytes.
Request Body - size: 0 bytes.
Response Header - size: 405 bytes.
Response Body - size: 93 bytes.
URL http://testphp.vulnweb.com/product.php?pic=1
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,428 bytes.
URL http://testphp.vulnweb.com/product.php?pic=2
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,368 bytes.
URL http://testphp.vulnweb.com/product.php?pic=3
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,401 bytes.
URL http://testphp.vulnweb.com/product.php?pic=4
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,453 bytes.
URL http://testphp.vulnweb.com/product.php?pic=5
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,382 bytes.
URL http://testphp.vulnweb.com/product.php?pic=6
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,454 bytes.
URL http://testphp.vulnweb.com/product.php?pic=7
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 316 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,734 bytes.
URL http://testphp.vulnweb.com/secured/style.css
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 313 bytes.
Request Body - size: 0 bytes.
Response Header - size: 343 bytes.
Response Body - size: 5,482 bytes.
URL http://testphp.vulnweb.com/showimage.php?file='%20+%20pict.item(0).firstChild.nodeValue%20+%20'
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 359 bytes.
Request Body - size: 0 bytes.
Response Header - size: 392 bytes.
Response Body - size: 261 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/1.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 12,426 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/1.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 12,426 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/2.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 3,324 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/2.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 3,324 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/3.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 9,692 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/3.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 393 bytes.
Response Body - size: 9,692 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/4.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 13,969 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/4.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 13,969 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/5.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 14,228 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/5.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 14,228 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/6.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 11,465 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/6.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 11,465 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/7.jpg
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 334 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 19,219 bytes.
URL http://testphp.vulnweb.com/showimage.php?file=./pictures/7.jpg&size=160
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 343 bytes.
Request Body - size: 0 bytes.
Response Header - size: 394 bytes.
Response Body - size: 19,219 bytes.
URL http://testphp.vulnweb.com/signup.php
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 296 bytes.
Request Body - size: 0 bytes.
Response Header - size: 407 bytes.
Response Body - size: 6,033 bytes.
URL http://testphp.vulnweb.com/style.css
Method GET
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 285 bytes.
Request Body - size: 0 bytes.
Response Header - size: 343 bytes.
Response Body - size: 5,482 bytes.
URL http://testphp.vulnweb.com/cart.php
Method POST
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 372 bytes.
Request Body - size: 19 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,903 bytes.
URL http://testphp.vulnweb.com/guestbook.php
Method POST
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 373 bytes.
Request Body - size: 33 bytes.
Response Header - size: 407 bytes.
Response Body - size: 5,393 bytes.
URL http://testphp.vulnweb.com/search.php?test=query
Method POST
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 367 bytes.
Request Body - size: 25 bytes.
Response Header - size: 407 bytes.
Response Body - size: 4,772 bytes.
URL http://testphp.vulnweb.com/secured/newuser.php
Method POST
Parameter x-content-type-options
Attack
Evidence
Request Header - size: 376 bytes.
Request Body - size: 96 bytes.
Response Header - size: 406 bytes.
Response Body - size: 733 bytes.
Instances 68
Solution
Ensure that the application/web server sets the Content-Type header appropriately, and that it sets the X-Content-Type-Options header to 'nosniff' for all web pages.

If possible, ensure that the end user uses a standards-compliant and modern web browser that does not perform MIME-sniffing at all, or that can be directed by the web application/web server to not perform MIME-sniffing.
Reference https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/compatibility/gg622941(v=vs.85)
https://owasp.org/www-community/Security_Headers
Tags CWE-693
OWASP_2021_A05
OWASP_2017_A06
CWE Id 693
WASC Id 15
Plugin Id 10021